CVE-2026-68383
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
In the Linux kernel, the DRM xe driver (drm/xe/guc) has a use-after-free vulnerability in the scheduler. The pointer to the queue name (q->name) is freed with the queue, while the scheduler may still reference it.
Risk Assessment
This could lead to system crashes or potentially to code execution in kernel context, posing a threat to system stability.
Recommendation
Apply a Linux kernel update containing the fix that stores the name in struct xe_guc_exec_queue to share the scheduler's lifetime.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Keep scheduler timeline name alive The scheduler keeps a pointer to the timeline name, but q->name is freed with the exec queue while scheduler fences can still reference it. Store the name in struct xe_guc_exec_queue so it shares the scheduler's RCU-deferred lifetime. (cherry picked from commit 41075f0eb5dcbd3b065d15f15ef7bbe9315188e8)